Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd8e1536-a1c6-3907-b666-b828f100c6cb.roa
File: cd8e1536-a1c6-3907-b666-b828f100c6cb.roa (raw, json)
Hash identifier: z9ojOyOfnb2FRICByuEKjq98vsoK2AfneDUS+FLI/hQ=
Subject key identifier: D9:13:36:29:C8:AB:7B:33:07:65:ED:CA:4B:63:DD:63:CD:CB:B3:7D
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF90FB78099D847B5008C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd8e1536-a1c6-3907-b666-b828f100c6cb.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:810e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:90:fb:78:09:9d:84:7b:50:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=3d87cbae-9376-4be2-81e3-34ca58011281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:53:c4:6b:49:03:35:79:16:cf:c6:1e:5b:
fe:0e:c8:32:d1:b2:6f:09:66:23:2d:9e:27:b1:02:
2f:1e:c6:a0:53:ee:f3:e5:6a:5a:01:68:9c:46:b0:
43:d2:21:f5:7f:76:b9:67:89:e5:d5:66:2f:16:de:
e2:d2:30:d3:4a:ce:5f:f1:9e:99:7c:d0:3e:80:56:
e6:38:93:a0:98:72:fa:56:82:ef:f9:9f:9f:b6:4e:
01:d4:01:f3:9d:64:75:6e:f9:28:9c:66:a7:6a:2d:
35:b8:1b:64:a8:77:2d:8f:6e:da:1f:76:c6:36:dd:
10:b9:8e:71:a0:0e:54:b3:e9:79:17:6f:78:d6:25:
2f:16:d0:98:21:33:15:b8:1b:94:b4:a3:ac:48:21:
ac:d5:c1:a9:5c:8d:22:38:f0:15:b5:c8:cc:d1:c3:
96:66:fc:09:13:f7:df:b7:6a:75:ee:79:82:2e:d6:
5e:22:b8:68:34:77:f0:d4:38:d0:99:4a:44:9a:bd:
b8:75:81:89:b8:07:71:33:13:4b:49:ff:a4:5a:29:
b4:29:88:97:c3:92:7f:06:be:06:f3:75:47:74:b8:
db:cf:6a:41:a8:e0:79:25:17:4e:47:ed:76:b9:05:
8b:e9:7b:f8:58:04:df:30:2e:99:68:4b:94:f9:a5:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:13:36:29:C8:AB:7B:33:07:65:ED:CA:4B:63:DD:63:CD:CB:B3:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd8e1536-a1c6-3907-b666-b828f100c6cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:810e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:7b:e0:c3:7f:24:41:65:ac:41:a2:56:b5:bd:1d:5e:a2:f5:
67:a5:87:f5:58:97:26:84:59:c1:ab:3e:c8:08:e6:2c:43:ac:
99:fa:cc:c3:93:16:d7:ba:58:9a:64:24:68:b3:43:01:16:fa:
55:58:fe:6c:db:41:c0:ea:9c:3b:e9:75:80:3b:66:33:fe:95:
8f:39:f0:e7:3e:12:a7:51:2b:8b:20:e0:bf:ab:3e:b5:a0:83:
2c:88:46:16:4e:ec:20:b2:e1:50:eb:a1:ef:c9:cf:57:e1:42:
44:da:ad:04:71:e8:d4:77:0c:1d:6e:c6:92:f1:da:79:a3:f0:
fe:a6:56:ac:30:14:cd:e9:d3:47:4d:44:fe:69:28:86:56:e4:
54:79:33:db:4c:cd:81:57:4f:73:27:13:75:67:8a:2f:69:c5:
75:0f:b7:86:34:0b:0d:34:9c:b4:e7:8b:8b:e2:1c:32:42:10:
77:14:93:8d:d3:0c:80:b6:56:18:f4:6f:e3:44:68:b5:83:51:
90:ea:c7:ca:67:6e:63:bd:a1:30:fd:9a:e7:5e:87:43:16:60:
91:92:96:09:fb:23:e3:c2:e5:69:b2:b2:19:e4:56:d5:2d:f9:
3d:f5:94:53:a1:61:61:59:6b:86:3d:07:8d:9a:ff:b0:1c:74:
ee:f8:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:59:22 2025 by rpki-client